Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently Amended) A data processing system for controlling access of at least one user to 
stored data, the data processing system comprising: 

means, responsive to a request from the user to access a set of the stored data that is available to 
the at least one user, for authenticating the user, wherein the request is initiated by presentation of a token 
by the user; 

means, responsive to successful authentication, for decrypting [[a]] an encrypted user specific 
table associated with the user, wherein the user specific table identifies the set, and wherein the token 
comprises the means for authenticating the user and the means for decrypting the user specific table; and 

means, responsive to successful decryption, for accessing the set, wherein the set is encrypted and 
the user specific table comprises (i) first data associated with decryption of the set , wherein the first data 
is decrypted by the means for decrypting, and (ii) second data associated with location of the set, wherein 
the second data is decrypted by the means for decrypting, and wherein the means for accessing the set 
uses the first data to decrypt the set and the second data to locate the set; 

wherein the stored data is capable of access by more than one user, wherein the data processing 
system includes a corresponding additional user specific table for each additional user of the more than 
one user, and wherein the system further comprises means for accessing a data structure comprising user 
data associated with each user of the more than one users that references a table location of the user 
specific table associated with a given user. 

2-3. (Cancelled) 

4. (Previously Presented) The data processing system of claim 1 , wherein the set comprises all of 
the stored data. 

5. (Previously Presented) The data processing system of claim 1, wherein the set comprises a 
portion of the stored data. 

6. (Cancelled) 
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7. (Previously Presented) The data processing system of claim 1 , wherein the token comprises 
means associated with an identity of the user. 

8. (Previously Presented) The data processing system of claim 7, wherein the means associated 
with the identity of the user is derived from one or more biometric characteristics associated with the user. 

9. (Cancelled) 

10. (Cancelled) 

1 1 . (Currently Amended) A method of controlling access by at least one user to stored data via a 
data processing system, the method comprising the steps of: 

in response to a request from the user to access a set of the stored data that is available to the user, 
authenticating the user, wherein the request is initiated by presentation of a token by the user; 

in response to successful authentication, decrypting [[a]] an encrypted user specific table 
associated with the user, wherein the user specific table identifies the set, and wherein the token 
comprises the means for authenticating the user and the means for decrypting the user specific table; and 

in response to successful decryption, accessing the set, wherein the set is encrypted and the user 
specific table comprises (i) first data associated with decryption of the set , wherein the first data is 
decrypted by the decrypting step, and (ii) second data associated with location of the set, wherein the 
second data is decrypted by the decrypting step, and wherein the accessing the set uses the first data to 
decrypt the set and the second data to locate the set; 

wherein the stored data is capable of access by more than one user, wherein the data processing 
system includes a corresponding additional user specific table for each additional user of the more than 
one user, and wherein the system further comprises accessing a data structure comprising user data 
associated with each user of the more than one users that references a table location of the user specific 
table associated with a given user. 

12. (Currently Amended) A tangible medium on which is stored a computer program product, 
wherein the computer program product comprises: 

first computer readable instructions for, in response to in response to a request from the user to 
access a set of the stored data that is available to the user, authenticating the user, wherein the request is 
initiated by presentation of a token by the user; 
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second computer readable instructions for, in response to successful authentication, decrypting 
[[a]] an encrypted user specific table associated with the user, wherein the user specific table identifies the 
set, and wherein the token comprises the means for authenticating the user and the means for decrypting 
the user specific table; and 

third computer readable instructions for, in response to successful decryption, accessing the set, 
wherein the set is encrypted and the user specific table comprises (i) first data associated with decryption 
of the set , wherein the first data is decrypted by the second computer readable instructions for decrypting, 
and (ii) second data associated with location of the set, wherein the second data is decrypted by the 
second computer readable instructions for decrypting, and wherein the third computer readable 
instructions for accessing the set uses the fust data to decrypt the set and the second data to locate the set; 

wherein the stored data is capable of access by more than one user, and includes a corresponding 
additional user specific table for each additional user of the more than one user, and further comprising 
fourth computer readable instructions for accessing a data structure comprising user data associated with 
each user of the more than one users that references a table location of the user specific table associated 
with a given user. 

13. (Previously Presented) The data processing system of claim 1, wherein the means for 
decrypting also comprises means for attempting to decrypt, in turn, each of the corresponding additional 
user specific tables as well as the user specific table until a successful decryption occurs. 

14. (Cancelled) 

15. (Previously Presented) The method of claim 1 1 , wherein the method further comprises: 
attempting to decrypt, in turn, each corresponding additional user specific table as well as the user 

specific table until a successful decryption occurs. 

16. (Cancelled) 

17. (Previously Presented) The tangible medium of claim 12 wherein the computer program further 
comprises: 

fourth computer readable instructions for attempting to decrypt, in turn, each corresponding 
additional user specific table as well as the user specific table until a successful decryption occurs. 

18. (Cancelled) 
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